diff options
| author | Pascal Quantin <pascal.quantin@gmail.com> | 2017-05-12 21:07:24 +0200 |
|---|---|---|
| committer | Anders Broman <a.broman58@gmail.com> | 2017-05-12 19:46:05 +0000 |
| commit | 008e6eff4e09e828226334401af82d242b84be4f (patch) | |
| tree | 23f449b281c9895a75359a8ca71cb52ba411679a /epan/dissectors/packet-thread.c | |
| parent | b6c2592ffa7352e9c9bc3a2aea2301eba8a6ca0d (diff) | |
Thread CoAP: fix 2 potential infinite loops
Bug: 13693
Change-Id: Ie47ca69a9941dbc273bb8f18e300773092a2fc96
Reviewed-on: https://code.wireshark.org/review/21620
Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'epan/dissectors/packet-thread.c')
| -rw-r--r-- | epan/dissectors/packet-thread.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/epan/dissectors/packet-thread.c b/epan/dissectors/packet-thread.c index 408b9f6312..835810c2ae 100644 --- a/epan/dissectors/packet-thread.c +++ b/epan/dissectors/packet-thread.c @@ -898,7 +898,7 @@ get_chancount(tvbuff_t *tvb) { int i, j; guint8 entries = 0; - guint16 check_len = tlv_len; + gint32 check_len = tlv_len; guint8 check_offset = offset + 1; /* Channel page first */ guint8 masklen; @@ -1742,7 +1742,7 @@ dissect_thread_mc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *dat proto_tree *cm_tree; int i; guint8 entries = 0; - guint16 check_len = tlv_len; + gint32 check_len = tlv_len; guint8 check_offset = offset + 1; /* Channel page first */ guint8 masklen; |